NE
Product
Neovim
31
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 21Medium 10Low 0
Watch
Add Neovim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25749 | 6.6 | Feb 6 | Vim is an open source, command line text editor Affected: through 0.11.6 |
| CVE-2023-1175 | 6.6 | Mar 4 | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378 Affected: through 0.8.3 |
| CVE-2023-1170 | 6.6 | Mar 3 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376 Affected: through 0.8.3 |
| CVE-2026-45130 | 5.5 | May 8 | Vim: Heap Buffer Overflow in spell file loading Affected: through 0.12.2 |
| CVE-2025-22134 | 5.5 | Jan 13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and… Affected: through 0.10.4 |
| CVE-2026-11487 | 5.3 | Jun 8 | Neovim View Branch secure.lua M.read command injection Affected: 0.12.0; 0.12.1; 0.12.2 |
| CVE-2023-2426 | 5.3 | Apr 29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499 Affected: 0.7.0 before 0.10.0 |
| CVE-2024-43374 | 4.7 | Aug 16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling Affected: through 0.10.4 |
| CVE-2023-48706 | 4.7 | Nov 22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability Affected: through 0.9.5 |
| CVE-2024-41965 | 4.2 | Aug 1 | Vim is an open source command line text editor Affected: 0.10.0 before 0.10.2 |
Showing 10